Warning impact 
Idenufy application risk areas and the urgency for resolving them. 


Impact 


Resolve now 


Compliance score 


71% 


S compiartrules 


Total 


+ Report Definition 
Data Transform 


Data Page 

» Gee Type 

+ acivny 
Application 

When 

> Ruleset 


Performance 
Maintainability 
Functionality 


No category 


Warning age 
Identify when warnings were introduced and how long they have been unresolved 
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Resolve before production 
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Megat sre 
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Fits with untied varings 


‘# Warnings by severity 


54 


Guardrails in PEGA 


- SI2R Team (Abilash & Naresh) 


Introduction to PEGA Guardrails 
Overview of PEGA Guardrails Dashboard 


How PEGA calculates Compliance Score with 
example? 


How PEGA fires warnings? =f 


discussed _: > How to create custom warnings in PEGA? 


Contents to be 


> Few examples from SI2R to remove warnings. 


Quality control(PCM , OOTB extension) 


Y Guardrails are the set of best practices for design and 
implementation of PRPC Applications. 


y Guardrails ensure you and your team is following these PEGA best [Total warnings | Severe Moderate Informational 
practices and compliance score report gives big picture on from PEGA _| (Severity=1) | _(Severity=2) | (Severity=3) 
1364 C æ | 551 484 


application coding standards. 


Y When developer is creating a rule and PEGA Guardrail is violated 
J then PEGA fires warnings on respective rule. T- 
There are 3 severities for warnings fired by PEGA — : . 

- Severe , Moderate and eeu ee (Refer to table in RHS for List of Warnings In PEGA - E , 
overview) >>> "Worksheet 
Y Itis advisable to try to follow best practice and get the warnings 

cleared, if we are not able to eliminate warnings then provide 
appropriate justification before rule check-In. 


Overview of PEGA Guardrails E 
How to Navigate to wapash b (0) 


Configure>> Application >> Quality >> Guardrails ani 
Compliance Score 


Compliance Score :: Check Compliance score (With different filter and r 
selection criteria) , Schedule Report , Export Compliance Report into PDF 


What can we do in this guardrail dashboa 


- Compliance Score — 


- Compliance Deta 
- Warning Summary 


à Warning Detail: 


‘Application: Guardrails 


Warning Details 


‘Compliance scare compliance Detais Warning summary 


Warning Summary :: Check warnings count 
ml and color code based on severity, Schedule 
@ Moderate @ informational Report , Export into PDF 


Compliance Details :: Check who 
os introduced warnings, Schedule Report , 
» Export into PDF 


2 Sever 


# Rules with warnings # warnings by severity 


233 


6 13 0 2 


sen wens naapi snopp 


Severity Type Warning Justification Justified? Rule 


51% 26% 11% 8% 


rage 


Text File 1 


How PEGA calculates Compliance Scorn“ _ 


yY Overall quality of the application can be known by its compliance è 
score. Ne, 


Y PEGA uses formula as shown in RHS for compliance score " 
calculation * 


Q System internally calculates a weighted value based on the number 
of severe and moderate warnings in the application. 


OO 


10Sev1u + 5Sev2u + 2Sev1j + Sev2j 
max| 0,1- x 100 


Total Remaining Rules 


Variables are interpreted as follows: 


a Seviu; the number of unjustified, severe (severity level 1) warnings in the application. 


* Sev2u: the number of unjustified, moderate (severity level 2) warnings in the application. 
a Sevij: the number of justified, severe (severity level 1) warnings in the application, 
« Sev2j: the number of justified, moderate (severity level 2) warnings in the application 


compliance score on 9 sale of O00, where 100 8 the best a Total Remaining Rules: the sum of rules with caution (severity level 3) warnings and rules 
with no warnings in the application. This value excludes property rules and rules that reside in 
erore Sf 90 or greater inditetes ydurapplicatiortie M desd oo 


Q 
v 
Q 
Q 
Q 


Compliance Score calculation for SI2R 


Application 


ion: E justiied Æ Unjustified 


Apply iter | sesectiter 
+ Rules with warnings # Warnings by severity 
Total as O ME 
: 
ım 
ım 


Severe Unjustified = 6 


Compliance score 


77% 1 


01 
Taanis 


229 


Total Remaining Rules=1011 


Report Definition: Compliance Score Warring Totals [Final] 


Severity: E Sew 


ere Ë Mos 


Ju Unjustified 


Condition Caption Column source Rolationship Value 
A pyCless q BI Snctequel | "Rule-Ob} Propet 

2 pxUpdateDatsTime q E raster trans v | param updatedFrom 

D pyRuleset 1G net stan ¥ | Param Excud! 

E a E| Snctequal + | Deprecated 

3 4 @ sod n 

= pyRuleset 4B snotequal + roredRulesetcomaherFor, 


135 


Severity: @ 


Moderate 


justification: @ Justified E unjustified 


# Warnings by severity 


23 Apply fite: 


Reset fiter 


# Rules with warnings 


Total 0 


Severe Justified =0 


severity: © Severe Æ Moderate E Informational 


Justification: @ justified 


filt Reset filter 


Unjustified 


# Rules with warnings 


#Warnings by severity 


0 


# Warnings by severity 


Total 15 15 
Activity 7 7 
Report Definition 7 — Č] 7 
Data Page | 1 
Moderate Justified 
=15 
10Sevlu + 5Sev2u + 2Sev1j + Sev2j 
max| 0,1 x 100 
Total Remaining Rules 


10(6) +. 5(23) +2(0) +15 
1011 


max (01 


Activity: StandardValidate [Final] 
@baseciass > Pega-RulesEngine:08-01-01 


Steps Parameters Pages & Classes: Security Test cases History 


Label Method Step page Description 
ure label exists 


Property Set-Messages make 


4 n 


if pyLabel is blank, set to keychain 


Validate ruleset name and add rule warning for some data types 


Call pylsvalidRulesetName, 


Loop When Call CheckForwarnings 


Check for warnings 


hh h hh 


Check for custom warnings 


Home CneckForwarnings x pxlNocheckForLock 


Activity: Check for warnings in an activity [ Final] 


1 Loop Property-Set 4 d only check if referenced rule is an activity and marked as Internal Jump 
z Loop Obj-Open ad pyReferencedactivity 4 (Open the activity Jump 
a Loop Java 4 ig Check the activity’s ruleset against the current Jump 


d check for warnings Jump 


Method Parameters 


Lf (singleliorningrorActivity.conteins("bobjOpen") || singlebiorningrerActivity.conteins("bobjRefreshAndlock")) { 


com.pegarules. generated. pega_wb_default .pxAddGuardrai IMessage(nul1, " BRNBCHEERFSELSER” , null); 


Y PEGA has created “CheckForWarnings” 
Activity and is placed in respective rule classes 
(Ex: Rule-Obj-Activity) for warnings to fire. 


+ 
Lf (singlewarningroractivity.contains("bobJBrowseraxRec")) 


Message: No check for lock [Final] 
ule Activisy Poga UiDesignos ota 


Priateedit € 


y In Java step, message rule in invoked to get 
message 


Detals Parameters 


Fall in the transition ofthe step acquiring the 


How to create custom rule 
warnings ? 


e Y In order to create custom defined warning we need to create an activity named “CheckForCustomWarnings” 
in the applies to class of the rule type. 


¥ So when ever we save a rule in PEGA it calls this standard activity “StandardValidate’”for validating the rule. 


Activity: StandardValidate [Final] & 


Java p Check to see if Description and Usage 


Call pzAddDeprecationWay 


Call CheckForWarnings 


4 
4 
4 check for warnings 
4 


15. Loop Wher Call CheckForCustomWarg Of 


Method Parameters 
CheckForCustomWarnings 
@ Pass current parameter page f, 


Name Value 


Check for custom warnings 


a) ee 


CalledFromRule true 


Y For example If we want to add custom warning on a data transform then we need to save the activity 
“CheckForCustomWarnings’” in the rule type class of data transform which is “RULE-OBJ-MODEL’. 


Y Inside the activity “CheckForCustomWarnings” we need to tweak java code which is already present in order 
to add the custom warning. 


Y For example if we wanted to add custom warning on data transform if the description is missing. 


Not recommended , just for knowledge. There are other ways to monitor and | 
control warnings, will see in “Quality Control” slides 


Examples from SI2R to remo "nings 


T 1: Warnings on 


Y We have got this issue as we have not confirmed finonain 
if the lock has been acquired by obj-open f 
method on the page we can check this he 


Private Edit Activity: UtilitySI2R GenrerateandCopyindexUID [Available] 
SG-SI2R-Work UtilitySI2R_GenrerateandCopyindexUID ‘SI2R:01-50-42 


y In the post condition as shown in screenshot in 
RHS, If we have added this jump statement 
where we have a check if obj-open has acquired 
lock then the warning will get resolved. 


Method Parameters 


iftrue trueparam if false false param 
Name Vah 


Example 2: Warnings on Obj-Save (Write Now) and commit. 


Steps Parameters Pages & Classes Security Testcases Specifications History 
Labet method step page Description 

1 Loop wnen Apply-DataTranstorm j J Jump 

2 ep: “Wary jobpsave, d d [s= atabase ne 


Method Parameters 
Name _ value 

Data Integrity: Severe 

Use of the WriteNow option in the Obj-Save ,Obj-Delete activity methods interferes with the PRPC transaction model and may result in stale database 
records, Consider allowing PRPC to commit the record when the transaction completes. 


faa oe Addu 


withe: 


OniyifNew 


cation 


Activity: CommonSaveAndCommit [Available] 


Steps Parameters Pages & Classes curity Test cases Specifications History ‘SG-FW-SIZRFW ‘CommonsaveAndcommit ‘SIZRFW:01-50-63 
Steps | Parameters Pages & Classes Security Testcases Specifications History 
Method Parameters 1 cop When Obj-Save a 4 ef to th 
Pass current parameter page Obj-Save d a Seve tec the database 
Name Value Call commitwithErrorHang als act omr thErrorHar 


mmonSaveAndcommit [available] 


Add a step 


Steps | Farometers | Pages&Classes Security Testcases Specifications History 


Parameters 


Y This approach will drastically eliminate severe warning 


count in application. Name Description Data type Required invout Default value smartp 
Y Gives overview (View references) on explicit save and a mae ms T 


commit performed in my application. z mF E 10 


> [commi Boolean 


Example 3: Warnings in Report definition on Column names with special characters 


Functionality: Moderate 
Cannot create a valid field value for the column heading '*RRP_OU_Code’. The text will not be localized. Field Value *RRP_OU_Code : cannot 
h terisk: 


Query Chart Report Viewer Data Acce: Parameters Pages &Classes Specifications History 
Edit columns 
Column source Cplumn name Summarize Sort type Sort order 

iE .RRP_OU_Code gs) *RRP_OU_Code <blank> 7 Lowestto Highest v 1 g 
ii |.ELRCode 4 Æ ELR Code <blank> Y || <blank> M w 
ii Type 4E Type <blank> Y <blank> v ® 
# Department 4% Department <blank> v| <blank> ” w 

i ii |.UseSakkarahMapping 4 [Æ Use Sakkarah Mapping || <blank> || <blank> ’ ioi 


© Add column 


Edit filters 


Filter conditions to apply 
Fi 


Condition Caption Column source Relationship Value 


F1 „ELRCode d &) is equal v Param.ELRCode 4 [ setectvaiues ](@ E 


© Add fitter 


Example 4: Warnings in Report definition on Column not exposed in DB 


Report Definition: GetSsUnitListForGrid [Available] 
SG-SIZR-Work-ServiceSupportUnit GetSSUnitListForGrid ‘S12R:01-07-04 


ptimized: Opt. ServiceTypeWithLabel. Displaying them may result in poor performance. Consult your system administrator 
s for reporting. 


Column source column name summarize sort type ot ont 
Y If Column is not exposed then we will get eS 4B [cacassio baie : 
this warning. ii -pyiD 4 5 |SU Case 1D <blank> , ’ 
v We can expose the column in DB and resave Hi pystatuswork 4 5 [Wore status “blanke q X 
the DB table instance to clear this warning. ii [OptServiceTypeWithLabel 4 E |[Servicetypewithtabel || <biani> M a 


Note: 


PEGA recommendation is not to have table 
exposed with more than 200 columns (Lot of 
Pega properties will be exposed by default in : column: SenyiceLyPen nieve 

work table). coun Tab ——— 


i Data type varchar 
We can create parallel work table (eliminating s 256 Eee 
pega junk properties) )and configure Index rule rp_bl Colum 
or configure Declare trigger to populate the 


parallel table. sera as 
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Example 5: Other common warnings in SI2R 


Activity 


Activity 
Activity 


RD 


Severity Warning Message 


The use of activity rules should be limited. The need for activities can be reduced by using data transforms, as well as techniques such as case management, 
Moderate the Engine API, and declaratives 


Information 
al You should create a test case for this rule to identify any regression issues that might occur when this rule is modified. 
Severe Java steps are difficult to maintain. Consider wrapping your logic inside a function and invoke your function using the Call-Function activity method. 


Some of your filters are using a parameter with the "Use null if empty" option NOT selected. Please ensure that you do pass the parameter. Otherwise, the filter 
Moderate will be dropped entirely and execution of the report will result in very poor performance. If you do not want this behavior, select the "Use null if empty" option. 
Information 
al Custom control in report 
Information 
al Duplicate Property Name 
Information 
al Empty System Name 


Quality Control 


Activity: pre-check in processing [Available] 


Rule v PreCheckin 5- SEE 


OOTB Rule = a 
Modification: SI eae pe nc ee cae ey 

Y Way to stop the check-in process if tabe . D 
a rule has unattended warnings 1 aX 

yY “PreCheckin” activity gets called when Te true pera _ i false oe 
from the WBCheckin activity, which (crete oer 4 
is provided by PEGA as extension se = 


point activity. 


Y PostActionCheckin > 
WBCheckin > RuleCheckin 


> 


v 


> checkin rules) 
Check In 
http://prpcdeveloper.blogspot.co ** Please do not check in rules with warnings. Please fix the warnings 
mé2018/L0/no-check-in-with-pea Se a ree ae rome eer oe 
- gs. 
` a You ABOUT TO CHEEK IN A RECORD THAT HAS 1 OR MORE UNREVIEWED WARNINGS. 
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PCM heey Change 


Manager 
PEGA jer): to control rule 
checkin if standards are not followed 


Y PCM package available in pega 
market is pointed to 


Add /Verity M 


https://community.pega.com/mark 
etplace/components/pega-change 
-manager-pcm 


er Monitoring Nodes 


Msceleneaus Reonts 
Sacent Vioiatons 


Peemotens 


a reuny 


a reny 


B7 vrsionee stuoie Gron 


Edit Application: PCM_Service 


Peu serasi 


ECSPOM-Cient Ee) 


“ns record nas 2 unrevewed warnings ('2/=w/==1) 


Demin cases daa Appicatonwaare 
Duit on applications 


Adi oppleaion 
Name 


Enabled components 
Ota component 


Component Version 


anagecoonenes 


ane apposen 


E erder mL 


Acvanced 


GOVERNANCE POLICIES FOR INSTANCE TYPES 


Documentation  megiadongsecuiy — Hitary 


_SavERNANCE POLICIES BY CATEGORY 


rue casi 


aat de opacity 


Development branches 
@rdderancn 


Noites 


Applicaton rulesets 


Oraris 


1 [ECS PONE Clerc 07.2 


2 ECSPCNECer a 


3 ECS PCN GvernanceRules 07:20 


o è 
"a m 
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Thank You 


